NEAS[.]78c5662b0e1af93c47a78cda87a959a0_JC[.]exe | Triage

Sharing

General

Target

NEAS.78c5662b0e1af93c47a78cda87a959a0_JC.exe
Size

119KB
MD5

78c5662b0e1af93c47a78cda87a959a0
SHA1

0b89b2d6be2327c120259b4b3873af5ece361cdb
SHA256

2772fc1269daf150b73eafa4bcb3b7241a73f4e03d3a15363604e575bfce2c76
SHA512

de08347053b76333128700a61697f2ed1a3cc96296b48a7d4b958a5a5d62b3287fcbb815a3c8ddbb758ea1f7eaf65822f11ca2ac38df792abac81bff1a145cfa
SSDEEP

3072:Bjuhx/GMQLSboHfkLnUcOgj2uwFYScb0Bpq:QP+7SbQfkLnlOC2uw++K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.78c5662b0e1af93c47a78cda87a959a0_JC.exe

Files

NEAS.78c5662b0e1af93c47a78cda87a959a0_JC.exe
.exe windows:4 windows x86

e8fa816db22e0b96b3e6ee5d33da67ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
VDMConsoleOperation
IsValidCodePage
K32GetMappedFileNameW
CreateThreadpoolWait
NotifyMountMgr
CreateDirectoryW
FatalAppExitW
GetWindowsDirectoryW
FatalAppExitW
InitializeSListHead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE